tools

Documentation

Index

• Variables
• func InitializeTrivy() error
• func IntializeTooling()
• func TrivyScan(repoPath, repoName string) ([]core.Finding, error)
• type TrivyResult

Variables

var TrivyVersion = "v0.60.0"

TrivyVersion is the pinned version you want to install. Adjust as needed. Also consider how you'd verify checksums, etc.

Functions

func InitializeTrivy

func InitializeTrivy() error

Initialize ensures Trivy is installed (downloading if needed) and updates the local vulnerability database so scanning is current.

func IntializeTooling

func IntializeTooling()

func TrivyScan

func TrivyScan(repoPath, repoName string) ([]core.Finding, error)

Scan runs "trivy repo --format json" against the given path, parses, filters for CRITICAL or HIGH vulnerabilities with no fixed version, and returns them as Findings. You can adjust filtering logic or add flags to the Trivy command as needed.

Types

type TrivyResult

type TrivyResult struct {
	Results []struct {
		Target          string `json:"Target"`
		Class           string `json:"Class"`
		Type            string `json:"Type"`
		Vulnerabilities []struct {
			VulnerabilityID  string `json:"VulnerabilityID"`
			PkgName          string `json:"PkgName"`
			InstalledVersion string `json:"InstalledVersion"`
			FixedVersion     string `json:"FixedVersion"`
			Severity         string `json:"Severity"`
			Title            string `json:"Title"`
			Description      string `json:"Description"`
		} `json:"Vulnerabilities"`
	} `json:"Results"`
}

TrivyResult helps unmarshal Trivy's JSON output. You can expand or trim fields depending on what you care about.